NEAS[.]1ce938cb4f1e944616a1a9fcacedb0a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1ce938cb4f1e944616a1a9fcacedb0a0.exe
Size

107KB
MD5

1ce938cb4f1e944616a1a9fcacedb0a0
SHA1

4b4da5da6fb0acb4fbe4b38bd67a8bf3a7de2660
SHA256

227c53b094735b2e72a3fef61623f1abc41503f5bcaf17dae994b8e600f3e2b7
SHA512

3a740f18b161cdfd6e029ac607aba968123930b52eede5edbc1a366713b4ecb35eee73728d56274718f7b4213e3275441ec98de6813ade65f8d0927bc25279c5
SSDEEP

1536:kkrWuYKGJPzSh0QAaDoSANlxBGpJ5+9c0eWndmZm6wPpjVrs2ryrd1vUQuqQGFNe:fK3hJPWG1NlxBuQ94Us1wPHs2quGf9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1ce938cb4f1e944616a1a9fcacedb0a0.exe

Files

NEAS.1ce938cb4f1e944616a1a9fcacedb0a0.exe
.exe windows:4 windows x86

10c937fa993126eddcc3c68a14bf6ba2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsA
CopyFileExW
lstrcpyA
lstrlen
SetMailslotInfo
FatalAppExitW
BuildCommDCBAndTimeoutsW
IsDBCSLeadByte
CompareFileTime
GetCommProperties
GetLogicalDriveStringsA
HeapFree

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 51KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE